MEMORANDUM

TO: Jeff Trandahl

Clerk of the House

Wilson Livingood

Sergeant at Arms

James M. Eagen III

Chief Administrative Officer

FROM: Robert B. Frey III

Deputy Inspector General

DATE: March 13, 2000

SUBJECT: Audit Report – Windows NT Administration Can Be Improved With Use Of Established Guidance (Report No. 00-CCS-01)

This is our audit report on the general control environment of the Windows NT servers owned by the Chief Administrative Officer but not administered by House Information Resources, and Windows NT servers owned and administered by the Clerk and the Sergeant at Arms. The purpose of this review was to conduct a high-level risk assessment of the Windows NT servers; evaluate logical controls associated with the servers; and review the applicable administrative, operational and security policies. This report, which includes a discussion of overall issues and recommendations, is confidential and should not be released to anyone other than auditee management except by approval of the House Office of Inspector General.

In response to our December 3, 1999 draft report, you concurred with our findings and recommendations. All management responses are incorporated in this report and included in their entirety as an appendix. The corrective actions taken and planned by your office are appropriate and when fully implemented, should adequately respond to the recommendations.

We appreciate the courtesy and cooperation extended to us by your staff. If you have any questions or require additional information regarding this report, please call Christian Hendricks or me at (202) 226-1250.

cc: Speaker of the House

Majority Leader of the House

Minority Leader of the House

Chairman, Committee on House Administration

Ranking Minority Member, Committee on House Administration

Members, Committee on House Administration